admin accounts have permission to perform all requests, but regular users can only modify their own data