PLF-5778: nonexistent user can be added to the permission list