fix(go): allow get user if admin or self;