user permissions api added