don't allow regular users to move entries; +tests