Add RBAC support

[dmccown]

Aha! Link: https://chef.aha.io/features/APPDL-1

[bdangit]

Carrying on from https://forums.habitat.sh/t/private-signing-keys/1014/6:

... better RBAC support for origins. So for instance, you could only have upload privileges given to certain members of the origin.

Having this feature will help mitigate this scenario: "User does have access to the origin and creates packages with the old private/public key AND then is able to publish them in on-prem builder."

[eeyun]

I resisted the urge to close this ticket and create a new one. Here is the initial discussion on scoping of this epic #1367

We've outlined what we imagine the hierarchy of roles to be in that design doc but obviously any of the details are subject to change as we start in on the code and test the features with users. We'll be adding our expected units of work as cards to this epic shortly.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. We value your input and contribution. Please leave a comment if this issue still affects you.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. We value your input and contribution. Please leave a comment if this issue still affects you.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. We value your input and contribution. Please leave a comment if this issue still affects you.