check authorization before update collaborators list