Clarify how permissions can be applied to Form Builder

[ebruchez]

Following #1860.

We need to document what global/per-app/per-form permissions do for Form Builder!

Indeed, they also allows setting data permissions for orbeon.builder, in addition to what we have in form-runner-permissions.xml.

The latter does two things:

• Form Builder Summary page
  • depending on the user's role only
    • filter list by app/form
• Form Builder Detail page
  • depending on the user's role only
    • restrict access to existing forms by app/form
    • restricts what new forms can be created by app/form

On the other hand global/per-app/per-form permissions allow:

• Form Builder Summary page
  • restrict who can see the Summary page ("List" permission)
  • filter list by permissions based on role and data ownership
• Form Builder Detail page
  • restrict who can create a form (based on roles)
  • restrict who can edit a form (based on roles/token or data ownership)

Is there any way to make a more consistent story between the two?

[ebruchez]

If we had #1487, regular permissions could completely replace form-runner-permissions.xml.

[ebruchez]

But if we go towards #2256, how do we express that?