add pins/user association and permission