restrict user editing links