Update the update? policy to enforce not displaying edit button unless user is authorized.