UK: initial work on roles
UK: add can_add_xform permission to UserProfile and OrganizationProfile, test for ManagerRole.add function
UK: check can_add_xform permission when publishing an xlsform via api
UK: code refactor: call check object permissions
UK: add xform permissions, for manager role
UK: make tags, bamboo_dataset, last_submission_time read only for XFormSerializer
UK: test user with manager role can change xform
UK: updated api docs
Merge branch 'master' into 270-create-default-roles-permissions

* master: (26 commits)
  UK: link to privacy policy
  UK: updated tos
  UK: corrected GoogleDoc import
  UK: pass correct parameters and return response from redirect_to_public_link()
  UK: pep8 cleanup, refactor show function
  MB: added TOS page
  MB: added privacy page
  MB: Updated syntax page
  MB: Added support page
  MB: Updating syntax page
  API cleanup with renaming
  PLD: use correct name of http 200 code constant
  PLD: correct delete docs, closes #305
  PLD: add test for delete
  PLD: cleanup label method
  PLD: syntax fixes
  PLD: move fetching instances into a separate function
  UK: move tests into TestProcess to prevent tests being run twice
  UK: fix: use correct arguments to has_permission
  UK: fix briefcase api - pick user from xform and not instance
  ...
UK: proper name for test
UK: updated permissions for ManagerRole, Manager can add, delete xform tags
UK: ReadOnlyRole
UK: copy over _make_submission[s] methods for use in api tests
UK: add data view access for readonly role
UK: e.message is deprecated in python 2.6
UK: use password specified by post_data
UK: test that readonly role cannot make submission to form they have access to
UK: add DataEntryRole
UK: check change_xform permissions on edits
UK: add EditorRole