Raise PermissionError when a non-manager edits a public workspace

A non-manager editing a public workspace now gets a PermissionError, matching the private-workspace check, and a test covers it.