user favorites and user permitions