fix: define fallback delete permission check for medium controller
fix: javascript 'Remove' and 'Confirm' data-triggers to use url defined in button
changelog