Restrict access to edit and update from the actual user