if user not in ret['changes']['perms']:
                    ret['changes']['perms'][user] = {}