add users update themseles information but permission