block user access to edit pages