pass user instead of id