Permission checking all features of the user / group manager

[skip ci]
Cascading contextual permissions implemented in the asset manager

[skip ci]