add authorization of editing users