added user permissions
completed all fo the permissions stuff