Fix authorization

Can change of author ignore permission, do direct access to changeauthor page.