[PoC] Rework permissions too limit some important functionality

TODO:
- [ ] rework all bundles to set basic permissions,
- [ ] rework voter service initialization to automatically create service from config,
- [ ] move permissions to configs,
- [ ] extend UI to easier role definition management,
- [ ] hide menu items based on roles,
- [ ] rework part of frontend code to handle new permissions.
It was one of previous attempts (hardly defined attribute <-> role relations).