user management: commanders can now only see users and campaigns they are assigned to