Use polymorphic associations in permissions

Previously we had many foo_id columns and one-to-many relationships, now we replace all that with a single polymorphic relation making the ACL system way more flexible.
include ModelAuthorization for ACL
Use ACLs for editing and closing tickets