Respect the core 'edit' user permission

Adjust permission handling such that all write actions require the user
to have the 'edit' permission in addition to any flow specific permissions

Change-Id: I14e725745ab1c032466924a75f6a15d531e0e678
Merge "Respect the core 'edit' user permission"