briefcase api: authenticated user has access to own account only