help methods for authorisation and edit and update if owner