Disable draw-assoc gesture when user lacks WRITE permission
The draw-association gesture should be disabled if the user lacks WRITE permission for the selected workspace.
Note: the create-assoc request actually fails. Nothing is created at the backend. Also in the frontend no assoc appears, but a
401 Unauthorized error notification.
This is a follow-up of dmx-intern/sprint-planning#117