fixed mistake with permissions in user details page.