added controller-level check if user redactor