don't give users the whole DB, just their entry