fix #909 hide the buttons on the card if current_user is not editor