login: derive user permissions from .admin file