adding permission handling and writing a test for usermanagement