Added Attachment#set_initial_permissions

Monkey patched Hydra::AccessControls::Permission to make it easier to extract the perms hash
AttachmentsController#create copies permissions and admin policy from attached_to object
Fixes #560