document privacy

show lock/unlock icon only for author, ajax change