You need to set lower priviledges to user1, and while you're at it, disable guest.