note for user/superuser functionality