only seller can edit product, even from URL