Improve permissions

[DougLau]

• [x] Check resource hashtags in permission access level checks
• [x] Use resource attributes for operate/manage write access level exceptions
• [x] Use Sonar permissions instead of queryPermAccess for DMS/video monitor/action plans
• [x] Fix java UI for roles
• [x] Fix hashtag permissions for scratch play lists
• [x] Change honeybee permissions to use Sonar/IRIS instead of DB query
• [ ] Configure permission w/ hashtag should allow creating, deleting and updating resources with that hashtag. It does not allow removing the hashtag. The same logic applies for msg_line (with restrict_hashtag instead of notes).
• [x] Convert capability/privilege records to permissions in SQL migrate script