added user, plus manifest permissions