Log user actions. Store user permissions. Check permissions on server side.