userPermission hack