User permissions to frontend-edit static placeholders

(Dis)allows certain users to edit the content of static placeholders. If the user has no permission to edit static placeholders, the public (and cached) content should is shown.

Introduces a new permission to the cms.Page model and a new setting which enables the new behavior.
I don't like this "is_flat" naming