readonly user view
check for admin or correct login for user mod. y