first use case: author update permission only in draft state