call isEntityEditable() in SecurityUtil