Fix voObserver rights for attributes

- until now, voObserver had the same rights to write attributes like VoAdmin
- from now, voObserver can't write any attribute, can only read them same like VoAdmin
Merge pull request #178 from stavamichal/fix_voObserver_rights_for_attributes

Fix voObserver rights for attributes