prevents users from unauthorized access on other users