Core/RBAC: Move mmap commands to RBAC (using individual permissions)