Record level permissions

Record level permissions

Here is what I want to do:
 
1.  User enters email and a password.
2.  Script compares to see if email is already in database.
3.  If email and password match, the user can edit ONLY their record.
 
I can do #1 and #2 - looking for help on how to implement #3.
 
Thanks!
 
Julia