users can't edit settings of other user