of course if grant_permission took a user_id, we could remove that lookup, so I changed that too