How to change user permissions for an action?