fixed user permission bug