fixed issue with permissions for user actions