Improve model access groups: add "orbeon_server_admin"

[bobslee]

First we need a re-design of the Orbeon permission-model.
A permission-matrix would be nice!

NEW suggestions

Add group orbeon_server_admin:
Which is allowed to read, create, write, unlink on orbeon.server.
Also change where "orbeon_admin" is used in code (e.g. Start/stop Persistence Server).

Alter the orbeon_admin to orbeon_builder_admin.
And revoke the permissions on orbeon.server - There only leave the read permission.

Alter the orbeon_user to orbeon_runner_user. ??
Add orbeon_runner_admin to orbeon_runner_user. ??

[dochse]

	orbeon.builder	orbeon.builder.template	orbeon.runner	orbeon.server
orbeon_server_admin	RWCD	RWCD	RWCD	RWCD
orbeon_builder_admin	RWCD	RWCD	RWCD	RW
orbeon_runner_user	R	R	RW	R

Sufficient enough?

[dochse]

This issue is solved, can be closed!