Prevent view-only users from editing queries

[rauchy]

I think we should prevent editing query source when the user doesn't have Full Access permission to the data source. We might actually be doing this already.

Then this becomes a non issue. We can open a separate issue for this.

Originally posted by @arikfr in #3383