Implement a permissions check function
Glad I caught that the edit page was completely unsecure. That could have been nasty...