use login name to restrict file accesses