fixed grant and added ro user