/user/permissions actually works now.