I don't think using QSetting / files is a good idea.

You can create user object and pass it around to dialogs (when creating them) or may be, create a kind of session manager (global), which keeps track of logged in user. All the widgets / dialogs can delegate with session manager for authorization.