Separate permission for rule changes (permission gating)

Only certain users should be able to modify rules. A dedicated user account with explicit re-authentication is required for rule modifications. This prevents accidental changes by technicians who are not aware of their permissions.