At the moment it is locked down to view only.
If people PM me an email address (an address linked to a google account would work better maybe?), I can add them and give them edit permission.

That should stop the vandal (and if not, at least we'll know who it is).