diff --git a/lib/models/user.js b/lib/models/user.js
index bfb431e3..355a4d7f 100644
--- a/lib/models/user.js
+++ b/lib/models/user.js
@@ -63,6 +63,30 @@ var options = {
       principalId: Role.OWNER,
       permission: ACL.ALLOW,
       property: 'removeById'
+    },
+    {
+      principalType: ACL.ROLE,
+      principalId: Role.EVERYONE,
+      permission: ACL.ALLOW,
+      property: "login"
+    },
+    {
+      principalType: ACL.ROLE,
+      principalId: Role.EVERYONE,
+      permission: ACL.ALLOW,
+      property: "logout"
+    },
+    {
+      principalType: ACL.ROLE,
+      principalId: Role.OWNER,
+      permission: ACL.ALLOW,
+      property: "findById"
+    },
+    {
+      principalType: ACL.ROLE,
+      principalId: Role.OWNER,
+      permission: ACL.ALLOW,
+      property: "updateAttributes"
     }
   ]
 };