1. maintain the mapping between users and checkpoints. 2. check the ownership and visibility when loading an existing checkpoint.