sadly, `dev_required()` accepts any developers and don't have an option to restrict to owners for regular GET requests, it only has a `owner_for_post` which is not what we want here (I wasn't aware that we wanted only real owners and not just developers here when @davidbgk asked for confirmation about this decorator)