add relation between store and user. Validate permission when edit, destroy stores