add permission to edit advanced fields

@maethu can you take a look at this. It adds a new permission so we can control better who can edit the advanced fields.