Changing domain manager permissions

[melinoix]

Domain manager permissions are changed to allow to create reference control inside his domain/sub-domains

[nas-tabchiche]

To do

Change {view,change,delete}_appliedcontrol to {view,change,delete}_referencecontrol.

[nas-tabchiche]

The task's subject was to allow the creation, edition and deletion of a ReferenceControl, not AppliedControl. Furthermore, view_appliedcontrol is present twice in the list. Once on line 132 and once on line 179.
For the first point, after reading my own comment under the ticket, I realized I wrote _appliedcontrol. My mistake. Still, a domain manager has no business managing applied controls 😉

[eric-intuitem]

Let's keep it simple: a domain manager can do anything in its domain. The single exception is approval.
| Domain manager | full access to selected domains (except approval), in particular managing rights for these domains. Read access to global objects |

[nas-tabchiche]

Closing this in favor of #893