user_id is required