Grant select on link targets to roles with write access

Grants `select` permission on link targets to roles that have `write` access.