Integrate secObj into authorisation checking
Add permissions.isServerOrDatabaseAdmin from CouchDB's /_users/_design/_auth