Manage authorisations

[claustres]

• [x] dedicated service to add/remove
• [x] hook to check permissions > bypass internally
• [x] service computing abilities for user
  • add cache
  • add hooks
• [x] make abilities check available on client