FIX Fixes #144. Users with limited permissions can delete workflows.

- Added canCreate/canEdit/canDelete() to Definition, Action & Transition.
- canEdit+canDelete call WorkflowDefinition#canCreate() due to limited
  range of available permissions.
- Made WorkflowField UI buttons disabled based on the canXX() methods.
- Added missing docblocks & tests