Add new ACL functions.
These new functions operate on Buckets, Default Objects, and individual Objects.
Also, make RoleOwner and RoleReader type ACLRole constants.