Only allow editing of order and shipments if ability permits it. Also scope shipment editing js to allow other shipment forms.

Fixes #2885