check user authority on user info page