fix may_edit permission for user