How does a target flow controller implement user permission management?