allow users read account detail and/or delete it