Guard saving with a permission that Editors have
in the ajax url pattern, replace LANG with {{LANG}} to make it more common sense