bug fix -unallowed users should not edit pins