add edit authorization (9.2.3)