naive implementation of rights to edit form