Implement permission structure
Document the code
Implement user class for holding information about a user
Implement security manager to check if a user can use this webresource