fix access on user service