Updated permissions
pass user_id as 3rd param on do_action