no edit for unauth