Modified UserObjectsOnlyAuthorization to check auth for update actions