fix the user permission