Editable based on security

The widget can now be disabled based on security. You don't need to have add an (virtual) attribute to disable the widget.