SSP-2631 Add PERSON_FILTERED_READ, PERSON_FILTERED_WRITE, code to hide MainTool based on permissions