User permissions

#24 @noahsark769