Restore permission check for editable JS/CSS.
Merge