Remove ":any"-based permissions; scope them to a publication instead

I just went through the person model/spec and majorly cleaned and
implemented this. I did not yet modify all of the various calls to these
methods. Those will need to be changed.

Additionally, there're still these ":currently"-based permissions. Those
need to change, too, but I'm not yet sure how.