c141216, redesign the tag enabled mechanism
c141217, rewrite the user access authorization mechanism