Only admin can visit /users