Only allow the collection creator access to edit/remove

This is a security fix to prevent unathorized users from editing/removing other users's collections
Merge remote-tracking branch 'navap/collection-access'

* navap/collection-access:
  Only allow the collection creator access to edit/remove
Merge branch 'beta'

* beta: (23 commits)
  Fix tests changed by removal of msg parameter.
  MBS-7713: Properly encode Wikipedia URLs
  Pass the numeric option to localeCompare/Intl.Collator
  Restore class=relationships on relationships heading h2
  MBS-7707: Sort work attributes in the sidebar
  MBS-7700: Sort work attribute types alphabetically
  MBS-7704: Factor out options trees from entities
  MBS-7696: Make buildOptionsTree work for empty trees
  Remove unused function link_type_options
  Remove potentially confusing multiple-assignment statement
  MBS-7703: Unused urls in l_series_url are not removed
  MBS-7617: Changing a URL's link type on a series edit page doesn't trigger any validation
  MBS-7672, MBS-7673: sort link type/target type dropdowns in relationship editor
  MBS-7702: Reduce the duplication in link_* macros
  Allow browsing releases by area in the webservice
  Allow browsing labels by area in the webservice
  Allow browsing places by area in the webservice
  Allow browsing artists by area in the webservice
  MBS-7698: Release editor asks for confirmation to leave even if there are no changes (but the release has URL relationships)
  MBS-7691: OZON.ru URLs are automatically edited to add partner=musicbrainz
  ...