abilities for a user