Add basic persmission checks.
Limit editable fields.