Authorization user-who can and who can not see pins