let admin/site manager edit repository for record; TODO: use CanCan directly