Allow edits only to user who created the record