don't show dashboard edit icon if the user doesn't have the necessary permission

issue #474