UI: record edition page can be opened by a user which does not have the permission

[nharraud]

Problem:
A user who does not have the right to edit a record can still see the page for editing a published record metadata: http://<HOSTNAME>/records/<ID>/edit

Level: Minor issue
This is a minor issue as the user would have to copy paste the URL to the edition page. There is no button displayed on the record page to edit it. Also when the user tries to save the REST API correctly refuses with a 403 error.