replace user insert with  insert method
added permissions settings