don't allow setting tags on others' notebooks

at the server and ui level