fixed some things in user.py
Implemented permissionmanagement in Python