adding privilege check on move and rename operations

fixes #4043 

basically we miss some checks weather move/rename is allowed or not

@rperezb @icewind1991 @bantu @bartv2 @karlitschek THX