added permissions, access levels, and user states