Restrict contact permissions
This MR restricts the users on editing & deleting contact information.
It follows the rules:
- a superuser can edit & delete all contacts
- a contact can be edited by the user that belongs to herself/himself
- a contact can be edited & removed by the user that created the entry originally