Only allow list owner to edit list; protect URLs and hide buttons accordingly