Authorisation of user edit & update