assume referential integrity