updated permissions to not error if no user is loaded