Enforce granular role-based access control for service functions

Enforce granular role-based access control for service functions:

	Cluster User	Service Operator	Service Administrator	Cluster Operator	Cluster Administrator	Administrator
Start/Stop/Restart Service
Decommission/recommission
Run service checks
Turn on/off maintenance mode
Perform service-specific tasks
Move to another host
Enable HA
Add Service to cluster
Install components
Modify service configurations
Set service users and groups

Entry points affected:

• GET /api/v1/clusters/:cluster_name/services
• GET /api/v1/clusters/:cluster_name/services/:service_name
• POST /api/v1/clusters/:cluster_name/services/:service_name
• PUT /api/v1/clusters/:cluster_name/services/:service_name
• DELETE /api/v1/clusters/:cluster_name/services/:service_name
• GET /api/v1/clusters/:cluster_name/services/:service_name/components
• GET /api/v1/clusters/:cluster_name/services/:service_name/components/:component_name
• POST /api/v1/clusters/:cluster_name/services/:service_name/components/:component_name
• PUT /api/v1/clusters/:cluster_name/services/:service_name/components/:component_name
• DELETE /api/v1/clusters/:cluster_name/services/:service_name/components/:component_name
• POST /api/v1/clusters/:cluster_name/hosts
• POST /api/v1/clusters/:cluster_name/requests