Security feature: check if editing worklog is owned by user