Remove proxy role from security category scripts, because they are called from unrestricted method.
No need to have a Manager proxy role in simulation select method.

because it is called from unrestricted method : builder._searchMovementList().
invoke getPriceCalculationOperandDict script in unrestricted_apply.

so that :
* the result is stable.
* no permission is required for Supply and Resource only for price calculation.
* no proxy role is required in script.
set permissions in all methods in ZSQLCatalog and SQLCatalog.
fix wrong permission in CMFActivity.
monkey patch PythonScript so that we have Guard like DCWorkflow.Transition.
init/afterClone script should be guarded by 'Owner role in the object'.
respect caller script's proxy roles in checking Python Script guard.
add Owner proxy role in proxy role scripts where we call newContent.

because we loose existing roles in proxy role scripts and init scripts require Owner role in context.
CredentialRequest_init can be called by Anonymous, that will not have Owner role.
verbose error message in case of Forbidden error in Python Script Guard.
patch DCWorkflow.Guard.check so that is respects caller's proxy roles.
Rewrite Base_getPossibleWorkflowActionItemList by External Method instead of Python Script having a Manager proxy role.

Because now proxy role in script affects workflow transition guard checks.
Add class security in DCWorkflow.Variables.Variables.
Make sure that two lists are always added