return users permisions list with content