users can't see disabled exercises, only admins can