Add tests to check that edit and update action require the right user