add ForbiddenServiceException for disallowed service operations and...

allow subclasses of AbstractCollectionsService to prevent delete of items.