35: added user permissions