proper permission checking for delete and update metadata subgraph mapping

[yuetloo]

Currently, the subgraph mapping logic only allows delete/update performed by the metadata owner.

Need to extend this by checking the granted permissions as well