set user permissions for listings