page auth for own user can edit