React user permission