question and answer about user-permissions