Local roles and role based access control.
Use '.' instead of ':' as the namespace separator for user and group ids to match the built in pyramid system.Authenticated / system.Everyone.
Enable role based access control; use local owner role on user and acces key objects.
First pass at workflow status based security for lab submittable items.
Replicate permissions from experiment lab.
Support None values for short rows.
Group support (will require patching in members of the admin group.)
disable_login property for user.
Swap out disable_login property for a status.
Remove award, lab, submitted_by, date_created from organism/source/lab (looks like an oversight.)
No need to require dataset_type
The jsonschema date-time format requires a timezone. Allow plain dates too as we have them for files.
Need fix from pyramid master.
permission tests.
Add searches on file accession alone (not full file objects) for speed and so tests work without ES (which expands embedded properties on GET).
Fix permissions fixture problem.
Merge branch 'permissions-185'

UPGRADE: Need to PATCH {"groups": ["admin"]} to current Cherry lab submitters.
Jump through hoops to handle differing file GET output formats (exapnded, embedded, test).  Get test working with testapp fixture.
Add test for unexpanded file json unpacking
Merge branch 'master' into edwFile