publish: disable js functionalities if not owner

Change-Id: I5a20b208704abc9ef214c7ecb2e9fe7a814ac121
Update HACKING.

Change-Id: I50c3b0cced031cd45527263b74d440a9b4d7b2f8