fixed bug
prevent modification if user doesn't have access already