add user permissions/access to listing