introduced relation attributes between users and permissions