conditionals added regarding user permissions
before_action temporarly disabled