added user/permissions