Add authorization to edit action