Plan for access control architecture

[kislyuk]

Steps:

• De-risk jointly with DSS the granularity of authorization scopes (e.g. will access control apply per environment, per zone, per bundle, or other)
• Implement DCP standard authn in the dcpquery frontend
• Decide how to apply authorization scopes to query results, and if any schema changes are necessary to accommodate this
• Implement DCP standard authz in the dcpquery frontend

[mweiden]

@MDunitz have a discussion with Trent and make sure your project_files join table (for supporting an ACL) makes sense with his Authorization design. Document the plan here and then close this.