each user can only view his own bookmarks