Create permissions (rebased onto develop)



This is the same as gh-921 but rebased onto develop.

----

Fix ```canLink``` method
see https://trac.openmicroscopy.org.uk/ome/ticket/10548