Testing that the edit and update actions are protected