Roles / Capabilities

[padams]

Refactor OWA's auth and privilege scheme to adhere to roles and capabilities.

• Capabilities should be defined and stored in a in a new 'owa_capabilties' table.
  ** Each capability should be associated with a role
  
• Controllers should set which capability they are asociated with
  
• Users should be associated with a role
  ** Roles should include:
  *** Guest
  *** Viewer
  *** Analyst
  *** Admin
  

Controllers should load the capability object they are associated with when they are created.

[admin]

Lets make the first version of the roles and capabilities be static array based instead of stored in a table.

[admin]

capabilities now live in the default settings array. This needs to be moved into the DB in a future release.
Also I adopted a mediawiki convention of using 'everyone' instead of 'guest'