But there is no user demand for limited access rights and demands that they prove who they are. Moreover, there needs to be some recognition that user data, including personal information and access information, is in a certain sense the property of the user.