users may now only view their own items