check if admin and/or user