don't need admin access to view records