logged in users can only edit their own paths and points