Local roles and role based access control.
Use '.' instead of ':' as the namespace separator for user and group ids to match the built in pyramid system.Authenticated / system.Everyone.
Enable role based access control; use local owner role on user and acces key objects.
First pass at workflow status based security for lab submittable items.
Replicate permissions from experiment lab.
Support None values for short rows.
Group support (will require patching in members of the admin group.)
disable_login property for user.
Swap out disable_login property for a status.
Remove award, lab, submitted_by, date_created from organism/source/lab (looks like an oversight.)
No need to require dataset_type
The jsonschema date-time format requires a timezone. Allow plain dates too as we have them for files.
Need fix from pyramid master.
permission tests.
Fix permissions fixture problem.
Merge branch 'permissions-185'

UPGRADE: Need to PATCH {"groups": ["admin"]} to current Cherry lab submitters.