Extract application permissions from a drools file and into Java code.

This is in preparation for the move to CDI.
Testing of this pull request must ensure that the same level of permissions in the drools file is still maintained. The drools file is still kept for reference. It may be removed after this pull request is QA'd and merged.
Whatever "translation-review" is, security.drl had a rule called ProjectMaintainerReviewTranslation for it, which seems to be missing here.  (The similar rule ReviewerReviewTranslation seems to be handled by this method.)