ACL system enhancments

Ideas:
* add saving permissions capability;
* add view to observe permissions for specific object: what groups have access /deny / inherited rules. 
* list all objects and permissions. 
* (?) user group inheritance with all rules. 
* deny access for object for group or user