added user permissions