add url edit functionality, improve permission system