restricting site edit to su