allow to edit root elements only with ROLE_NODE_ROOT_MANAGEMENT