UI for permissions in usergroups

The html for a permission (ac_may list) was split out into its own HTML template and ViewModel.js.
Code and UI was added to make it easy for users to adjust the value of ac_do by checking or unchecking
one of the six permissions.