Updated the RequestController to check if the user can modify the request