Add way to specify roles for Collection / Items

[raphaelrpl]

We should replace the concept of is_public in Collection/Item for role name system. It will improve the way to grant access to the privileged collections / items for a group.