Resource based authorization

[maliming]

Resolves #236

This is currently an experimental PR. We will be working on

Work to be done

• Implement IResourcePermissionChecker in the Permission Management module. This is just for checking permissions, not managing (setting) them. Defined in the framework, so any module can be independent of the Permission Management module, yet can check permissions. We can implement as NullResourcePermissionChecker (just throw not implemented exception for now) in the framework to not get DI exceptions.
• Create IResourcePermissionManager to manage (get/set) permissions for resources in the Permission Management module, like the current IPermissionManager service. Implement it in the same place.
• Create an app service to provide application logic to manage resource permissions.
• Define a resource permission management modal, which should be reusable, like the current permission management modal.
• Documentation
  • New: Resource-Based Authorization (framework/fundamentals/authorization/resource-based)
  • Update the permission management module's documentation
  • Mention about the new system with related places (main authorization document, entities document, etc)