Added some additional permission service methods.
Renamed the many-to-many table "EntityReferencesToEntitiesGroups" to "EntityRefToEntGroups" - so that it is short enough with the security prefix to still work with Oracle databases.