fix : refuse user ;  admin changes user info