user editing and authorization