refs 6099 Ability control for Functions

Function: define controller and actions to control access
FunctionClass: define user group to operate same function control
FunctionClassAbility: define each abilities to access functions

Controllers controlled by the Ability control
  ApprovalsController
  BindingItemsController
  ItemsController
  ManifestationsController
  OrdersConroller
  SystemConfigurationsController
  UsersController