security checks, mark read method