users can see only their emails, admins can see all
users can only manage tasks and memberships that they are member of