Hide some workflow buttons from users without update privileges

https://reciprocitylabs.atlassian.net/browse/CORE-10
https://reciprocitylabs.atlassian.net/browse/CORE-11
Anze, please explain what "context='for'" means.