feat: handle user permissions
issue