user can access any badges