Remove unused permissions

There's unused permissions on orders and partners that interfere with
our permission-based dashboard.
Introduce permission checking logic and decorator

Allows passing a list or two-tuple of lists of permissions that are
checked against the user.
Add support for permission checking to core Application class

Allows specifying default permissions and individual permissions based
on view names.
Move dashboard apps to new permission handling

Effective permissions are unchanged apart from catalogue views, which now
also allow users that have both partner.dashboard_access and
catalogue.change_product as permissions.

Includes tests.
Filter dashboard menu based on users's permissions

Introduces a default filter function that only returns dashboard menu
nodes that the user can access.
Add basic tests for dashboard filtering
Handle permissions for ProductDeleteView

Required updating tests.
Handle permissions for ProductListView

Added tests as well.
Handle permissions for ProductCreateUpdateView
Fix bug in permissions for dashboard.catalogue app

The default permission was incorrectly set. This also masked the missing
entry in the permissions_map for editing products.
Drop fine-grain control with Django's default permissions

I've changed my mind on this and think we should KISS. So the support
for the catalogue.*_product permissions has been dropped from the stock
dashboard. Clear case of feature creep, and it's easily added if needed.
Add permission support to oscar.test

This will become commonly-needed functionality.
Add permissions support to dashboard order views
Bugfix for filtering in OrderListView

Seems like somebody forgot to use the date_to variable.
Add assertNoAccess test to ClientTestCase

Checks for both HTTP 403 and 404
Add tests for permission-based dashboard order views
Merge branch 'master' into feature/permission-dashboard

Conflicts:
	oscar/apps/dashboard/orders/views.py
	oscar/apps/dashboard/partners/forms.py
	oscar/test/factories.py
	tests/functional/dashboard/order_tests.py
OrderListView: Move setting base_queryset to dispatch method

The CSV download POSTs to the view (at least the tests do), and it's the
right place for it anyway.
Docs: Extend deployment advice for caching, emails and SSL
Docs: Fix duplicate object description for AbstractOrder

If using autodoc to document Oscar app's models, one needs to add
:noindex: so Sphinx knows which page has the canonical model
documentation.