Api tabs: anonymous user has access to feedback manipulation

[marla-singer]

Verified on nightly
Anonymous user has access to feadback manipulation

Steps:

1. Create any feedback in api
2. Sign out
3. Go to this api and open Feedback tab

Found result:

Expected result: Remove feedback must be available only to api owner.

OS: debian 8
Browser: Chrome 52

[55]

@bajiat interested

[brylie]

We need to wrap the following lines in an {{# if api.currentUserCanEdit }}.

https://github.com/apinf/platform/blob/develop/feedback/client/single/single.html#L20-L34

[brylie]

We also need to add allow rules for update and delete on the Feedback colleciton:

https://github.com/apinf/platform/blob/develop/feedback/collection/permissions.js#L8

Only api.currentUserCanEdit approved users should be able to edit/delete.