Fix voObserver rights for attributes

- until now, voObserver had the same rights to write attributes like VoAdmin
- from now, voObserver can't write any attribute, can only read them same like VoAdmin