Fix that last change to edit permission check.

Apparently nothing about that was right, and my incomplete testing only hit the "user.admin" case. Derp.