registration & user permission