allowUpdate should be false for annotations of other orgas, even if isPublic and editableByOthers are true

[fm3]

This rare combination leads to allowUpdate=true in the annotation restrictions. This should not be the case.