$ 0 0 Seems to me that it would be quicker and more reliable to just create a role with that permission, then assign the new role to that user.