Group editor (fixes #12, fixes #14)

Full javascripty ACL editing.