Server side permission checks

[gjvoosten]

Split off from #2191:

Server side permission checks (was #313)
Depending on the object type being edited and on the role of the logged in user , one may be allowed to edit only a subset of the properties of the object.
Make sure that these permission checks are now implemented also server side (if this is not done yet).
See for instance issue #36 and #200 .