users are able to edit links, which they don't own