user: fix @require_permission