all users can see user 1