check user dbs not readable by other users