RR: return users with perms for forms