[webui][api] added edit/delete functionality with permission checks