insert into permissions(user, role) values (?, ?)