namespace permissions

Now that we have namespaces let's address how we can give admins more flexibility.

Let's list out the privileges we'd like. Then we can map it to existing privileges and see if we need more.

So far we have:

1. Modify namespace descriptor (ie quota, other values)
2. create namespace
3. delete namespace
4. list tables in namespace
5. create/drop tables in a namespace
6. All namespace's tables create
7. All namespace's tables write
8. All namespace's tables execute
9. All namespace's tables delete
10. All namespace's tables admin

1-3, is currently set to global admin only. Which seems acceptable to me.