You mean a permission like user a may do this and user b that? In my apps I use a map with the info like admin, read, write, etc. retrieved via login from a db on my webserver. Search the forum for login and MySql or so.
In a local network you can use B4J with a SQlite db and Asyncstreams for the communication (or many other ways)