user permissions fix