Also fixed wrong permission check for update form