EDIT

implementing #4120: User always needs to have the right to change password and hiding all user related menu contributions if no user is logged in

• added util method to get for getting a CDM entity (used in authenication/permission framework)
  • made use of this method where the type of the parameter was too general (like object)
  • made getBaseUnit() of DerivedUnitFacade public

RolesSourceProvider to enable activities by cdm roles and protecting bulkeditors and term editors - #4055 (action enablement adapts to the users granted authorities)

base implementation and configuration for securing the editor - #4055 (action enablement adapts to the users granted authorities)

first bits for #3097 (disable editors if a user has insufficient grants for a taxon or taxon node) - TaxonEditor disabled, views still to do

fixing #3096 (visual response if a user is not granted to edit a specific part of the classification tree)