modify user permission model and view