typo on the permission user parameter