9.2.2 Requiring the right user - part 1