Updating network labels of allocated networks requires admin rights

[Gerrit91]

An edit user can specify labels for a network and run network allocate without problems, but then the user cannot update the labels of "his own" network anymore because network update requires admin rights.

Restricting network updates to admin users generally makes sense, but for "allocated networks" we should allow updating them (if parent network ID is set).