issue #39 - if user not author or admin, then can not see update page