not owner or admin