Only let admins update documentSets. Fixes #372