user change permission bugfix