use superuser context
don't check user in superuser context for isReadable