user permission must returned only submitted labs