disabled user access ability checks