fixed user access bug; closes #906