add user permissions to data approve process