certain fields are read-only for one user that aren't for another