permission check for edit user
clean up user view