BS-11126, add user permission rule