Fix permission issues in AJAX editing methods