WIP New permissions

Implemented base collection filter in authorizer so we can limit queries
just to records to be listed e.g. Support for not-granular resources in
filter form (AuthSource). Modified link helpers to support new
permission system.

Converted:
- architectures
- audits
- auth_source
New permissions for SmartProxy
New permissions for CommonParameters

... and partly other Parameters
New permissions for ComputeResources and vms
New permissions for ConfigTemplate
New permissions for Domains and Environments
New permissions for Hostgroup
New permissions for Host
New permissions for Image, LookupKey, Puppetclass
New permissions for Medium, Model, Operatingsystem
Backported fix from #1129

Can be skipped after rebase
WIP New permissions for Ptable, Puppetclass, Report
New permissions for Subnet, Usergroup and User