Set the correct access right for the cancel link to work