i want to limit user to access, but "manage permission" not work