add user access control.

Change-Id: I6861fe611c153e37cab6ec524b1bbba53763bd0b
Signed-off-by: Sharl <amoiz.shine@gmail.com>