Adjust license request data format to include the license url.
Use the same data format for input and output.
Allow only trusted publisher add and remove user actions.
Accept user actions as accepted when coming from a trusted publisher.
Test that mocks up cnx-authoring's interaction with publishing.
Apply permissions to role and acl change requests.