don't allow renaming in client if user is not owner

services/web/app/views/project/editor/header.jade

@@ -28,7 +28,7 @@ header.toolbar.toolbar-header(ng-cloak, ng-hide="state.loading")
 
 	.toolbar-center.project-name(ng-controller="ProjectNameController")
 		span.name(
-			ng-dblclick="startRenaming()",
+			ng-dblclick="!permissions.admin || startRenaming()",
 			ng-show="!state.renaming"
 		) {{ project.name }}
 
@@ -42,6 +42,7 @@ header.toolbar.toolbar-header(ng-cloak, ng-hide="state.loading")
 		)
 
 		a.rename(
+			ng-if="permissions.admin",
 			href='#',
 			tooltip-placement="bottom",
 			tooltip="#{translate('rename')}",