API: Decides access level from member credentials in db