permission sorting
fix lecturer path in user_attendances controller