fix for hiding edit/cancel with zero authz