all user can manage assets