#966 fix default user permissions

resolves #966