I know we don't have multi-site quite yet, but would it make sense to check if the user can update the current exhibit which is held in the `@exhibit` variable?