prevent user from editing other user