Make user management has access control.