Add new ACL functions.

These new functions operate on Buckets, Default Objects, and individual Objects.
...and the same for the "Delete*ACL" calls... => "Delete*EntityRole".