Integrated ownership, ACL and minor fixes

- Orgs can propose new attributes or changes to existing attributes for
  events that they do not own

- publishing users of the owner organisation can see, accept or discard
  them

- Reworked the access control

- minor fixes
Small errors with the merge corrected

- some errors managed to slip through during the merge, should be fixed