job10:  re-adjust authorization for each type of resource by add <table_name>_auth tables
job11:  add "approval" function for inactived user.