Assigning permissions to a user