Assets: attributes are not always readonly for user with just restricted read access

[pierrekil]

Reproduce:

• add and enable the configuration item 'restricted read'
• leave out or disable 'restricted write'
• add and enable 'read only'
• the write button is still actionable

Expected:

• switch around configuration item to a single 'No access restricted read' and 'No access restricted write'
• if 'No access restricted read' don't show attribute
• if 'No access restricted write' also enable 'Read only'

[richturner]

Think this should close the duplicate #1040