front end authorization for creating and editing milestones