restrict operate content only author