added poor man's ACL to protect user data