only users with the 'change states' can change states