Set up User permissions and read/write access API