WIP: Fix security of `edit_action`

There's no reason to make this action only available to users with "Modify portal content" permission, we have several scripts (especially in client specific customizations) where we use this to add notes in history - sometimes notes like "the script could not modify this document because it was in wrong state"