permissions expansions for users