Move ACL editor into a separate template

The user rights remain dynamic, based on the object type (addressbook vs
mailbox vs calendar).