Update CTF to enforce per-item permissions

ComplexTableField_Item's edit() and delete() functions currently only check global permissions before executing either action. This patch calls the item's own canEdit()/canDelete() methods, to make sure that any fine-grained permissions are respected. 

An example use case is assets management with per-file access permissions and with the DataObjectManager class installed (so that CTF is used).