How to achieve that a user who has access with password protection to a