users can only modify their own items and no other user's