Permissions UI

BTW, the same code (very similar) is executed on client when setting defaults for new annotations in ```changeRole = (data, role) ->``` of client/publication.coffee.

But there I can leave these guards in because client is not multithreaded and there's no worries?