test what a user can and cannot do based on whether or not they have admin privelages