content edit/del auth