Implement user permission part, not checking password for now.