fixed bug with user site permissions