Apply consistent permission attributes on client side routes and server side processes [2020:O]

[Brian Lewis]

No description provided.

[Ghislain Hachey]

Issue #574 was marked as a duplicate of this issue.

[Brian Lewis]

First pass - apply Read permissions by topic on the base route of each feature; e.g. site.school gets SchoolRead. This is then inherited through all the descendants, so we can overwrite the ones that need to be higher.

Change the stateaudit display to display the permission associated with each state as a tool to assist.

[Ghislain Hachey]

@Brian Lewis Please do only minimal cleanup work on this. We can come back to it after all higher priority deliverables have been met.

[Brian Lewis]

task(security): apply appropraite security on client-side states; show permission in stateaudit

Resolves #732

→ <<cset 4daee43f7f6b>>

[Brian Lewis]

Also need to make corresponding changes on server end points

[Ghislain Hachey]

@Brian Lewis was this completed? Applying corresponding changes to the server end points?

[Ghislain Hachey]

@Brian Lewis I have seen a fair bit of permission changes to the server end points. Would you say this work from last year is completed?