Extract all permissions tests to AccessPermissions

* tests are now 'can_alter?' and 'can_destroy?'
* admins have blanket permissions on everything
SwarmController behaves correctly for admins
GraphsController now works correctly if you're an admin.