users cannot visit claim page of claims not related to them