added basic user permissions