admin can change any rating and users can change their own rating