Add support for group permissions at page level

[tboutell]

We did this on FM, merge it back to Apostrophe in the trunk as part of the 1.5 effort. We shouldn't haul in the LDAP support but the hooks that allow it to be done with project level overrides will still be there. We may need to pretty it up some visually.

[tboutell]

Done in [2016]

Apostrophe now supports granting groups editor and manager privileges at any particular point in the page tree, building on our strong support for granting privileges to individuals.

Add the new 'editor' permission to the GROUP (not the individual) in order to make it possible for that group to be granted privileges. This is analogous to adding individuals to the 'editor' group to allow them to be granted privileges singly.

Be sure to run the apostrophe:migrate task.

I ought to do some tuning to cut down on the number of SQL queries involved.

I ought to document this.

[geoffd]

Very cool. How do you make a group?

[tboutell]

Same as making an ad hoc group on F&M. You go to the Users page and there are dashboard links on the left to switch between the users and groups admin pages.

[rickybanister]

There is a new design for adding the manager privileges to editors. We are no longer using the 'manager' nomenclature. We're just giving them additional privileges.

[tboutell]

I understand why you want this but there are different app.yml settings determining who the candidates are to receive these privileges so this is a backwards-compatibility break (although I don't know that all that many people have ever really leveraged that).

More importantly aMultipleSelect is not set up to implement additional properties, only a multiple selection, so there's a lot of rewrite on the front end too.

This would take some time.

[johnnyoffline]

The functionality here is really already built and it's in the trunk.

I am opening a new ticket for a round of design for the page permissions.