Code review & documentation: RBAC implementation

[killua-eu]

• [ ] ensure no rbac specific code is an inline hack, php has had functions for ages
• [ ] ensure function eats table, object and action and spits granted/denied, performs logging where required per additional parameter.
• [ ] document order rbac rules as they are applied