- new object to define versatile access rules.
- provide cache to keep fast access.
- associated with user or user group.
The orm layer is modified to use them. This modification and
pre-defined rules in xml data replace the most part of implicit magic
around company_id.
bzr revid: bch-73e82904c54c3ad4f5a7454a446af30572ae156d
bch