add a way to set the user permissions in the client