add checks to models to make sure someone doesn't try to steal resources