user permissions for _admin_user

- non admin user can view only himself