only show user access for private blogs