User Permissions and Two Factor Authentication