users can only write to pads they own