check whether attacker is owner