Control user privilege