protect against adding tags for non owners and admins