Add authorization for uploading and viewing docs

[Mihael Schmidt]

It should be configurable if upload and/or viewing of documentation requires some permission and authentication.

So we need an UI to configure the permission for each action.

And we need a UI to configure who has which permission.

This must all be persisted in the database.