Enhanced permissions model allows for an "admin-blog-post" permission, etc. ("admin-" followed by the instance type). Push all assets late enough that we can see all the other modules before pushing assets; this helps the groups module set up editing of all these new permissions. The get method checks the admin-foo permission independently and shuts off permissions in apos.get if appropriate. The putOne method checks the edit-foo permission and always shuts off permissions in apos.putPage. The putOne method was refactored for clarity.
Merge branch 'master' of github.com:punkave/apostrophe-snippets