user ability to edit only themself