restrict edit page to nonowner