[grant permission to user]