added warning for changing user permissions