can specify user id in security el