messages: remove edit capabilities
messages/edit: remove view
messages: fix unauthorized access :P