Fix ProgramEditor permissions to not include Program delete

Note this is a pull request into release/0.9a13 branch, and includes a migration.