users without admin can only god themself