[#233] Changed allow_edit flag to organisation level and updated permissions