Authorization Change unless pinuser is currentuser