Changed to acl-based access for edit buttons