fix users permission