Implement a proper group permissions model

[allyjweir]

Currently, the only thing limiting access to other user's datapoints and projects is that certain UI elements are hidden.

This isn't an issue with the usage of Lackawanna in singular deployments. For a multi-tenancy configuration, there needs to be better group permission controls for projects, datapoints.

This extends to the access to files within the storage backend