mocksEditable

Mirrors EditingCapabilities.mocks. Listing rules and the global on/off status stay available to any authenticated session; every rule-mutation route (create, delete, per-rule enable/disable) answers 403 while this is false.