users cannot access spellbooks that do not belong to them