changed user permission
added permissions for users