realise every user can only list his activity