Revise roles permissions

Currently any users with the role 'Engineer' able to delete entities that are driven by 'ProjectEntityController' class.
This mechanism should be improved to give 'delete' permissions only on particular entities.
