Making API Explorer read only if user is not  the owner.