add user-permissions for packages