Implement user-access control for assigning users to a requirement