Grant access just based on on username, implement #2026