Fixed user edit authorization