syncbase: Enforce ACL spec on sync RPCs.

Syncgroup Manager RPCs now check permissions according to the Syncbase
ACL specification document, including recursively checking for Resolve
access where appropriate.
Documented status of Syncbase-to-Syncbase RPC permissions better.
Added other sanity checks - Collection existence and Read permission at
syncgroup create/join, prevent removing self from syncgroup ACL.
Added permission spec tests for client-to-Syncbase Syncgroup Manager and
Blob RPCs.

MultiPart: 1/2
Change-Id: I22cdb663440d2d8d39bc06a669de44d3d0c491b2
4 files changed