Access Control: new permission rule (#592).

Not yet functional.

BREAKING CHANGES

Every workspace must have a "Workspace Type" assigned.
Plugins which introduce its own workspace must be adapted.
See Migration3.java of Workspaces module.

See #592.