post edit security for users