BUG: attributes cannot be edited by anyone but the super admin

Adds permissions for attribute editing for non-admin users.