users can only access their own references