fixed site-wide permissions for different users