Fix enforcing of edit authorization for custom fields