R-5: Impelementing authorization for each kind of users