prevent unauthorized calls to administrative methods
users have their own vocabulary