views: assign permission factory should pass user and role separately

[nharraud]

Problem: The permission factories for assigning and unassigning roles are given one tuple containing both user who will have the role assigned to and the role itself. In order to be consistent with other Invenio REST APIs the parameters should be given as separate keywords.