User can only interact with entities they own