Disable editing on the front end

The front end must consume the new permissions object and use the flags to determine whether or not entities are editable.

Edited by (Mark) Ryan Sallee