make permissions work
users managing work