user responsibility attribution