current_user_filter for authorization

only the owner of the resource has the authorization to edit and update.