Create DSL for permissions

Using 'allow [controller, action]' instead of a bunch of conditionals
and return true stuff. Btw, changed permissions spec to use symbols in
spite of strings, as now it is supported by the model.
Add possibility to allow based on product ownership
Add conditional for showing the links to edit product

7:55/20:37