Support work sources

Actually write permission. This is changing the work properties, i.e. a write, not removing the whole work (which require admin). Rationale is that collaborators on a work should be able to change sources and annotations.