CRM-12499 - Allow CMS-specific permission expressions

Reopen PR #861 using "master" instead of "4.3"