Feature/risk assessment

This makes me uncomfortable. Maybe I just don't understand it fully. But to have extensions changing RBAC for models defined in other extensions/modules feels like it introduces a potential for abuse, resulting in security-related inconsistencies, potentially conflicts as multiple extensions are loaded.

I feel comfortable putting the permission here, and making it a global thing, in line with ProgramReader being globally available/fundamental. I don't feel comfortable putting it in risk_assessments, unless the permission comes through RiskAssessment. But we had a long conversation about this a couple days ago where it was said that the Program context made sense in this case. To move the permission and associating it with RiskAssessment we would need to change the context. And I'm not sure that would be correct.

Let's talk more about this one.