preventing unwanted users to see private info