Adding basic permissions to user api