simpler command parsing
simpler permission check + user providers