only callable when user could access his own scores