Tightening user permissions