only admin can del item; only current_user can edit item/folder and post comment/perly