permission fix for for catalog users