Fix: public user can save the annotation of program and block

  * work only with right formkey