different types of users cannot see pages they arent supposed to, edited controllers