Solution for this problem: http://nerddinnerbook.s3.amazonaws.com/Part9.htm
"Using the User.Identity.Name property when Editing Dinners
Let's now add some authorization logic that restricts users so that they can only edit the properties of dinners they themselves are hosting..."