user can only edit his/her own settings