only allow the snippet owner to update a snippet