Make it impossible to edit whatever user should not edit
Add forms for adding permissions