Core/RBAC: Move cast and characters commands to RBAC (using individual permissions)