Kpi buttons are visible for editor only users

Problem

Kpi buttons are visible for editor only users, and on click it throws 401.
Also acl right definition in the database is missing for the kpi action. It relays on editor_task -> all, which is available for admins and above.

To reproduce:
1. login in translate5 with user with only editor rights