GUI-1298: Allow bucket/object ACLs to be defined by ID and email address

Implements https://eucalyptus.atlassian.net/browse/GUI-1298