users cant view tasks or memberships they don't belong to