Review session.details.permissions usage (4.1 and beyond)

[jamoore]

cF: ​https://trac.openmicroscopy.org.uk/omero/browser/trunk/components/server/src/ome/services/sessions/SessionManagerImpl.java#L206

The use of Permissions.DEFAULT here may be causing issues with setting the session permissions.

Related to #1434. See #1704

---

For the initial version, we will be restricting all object permissions to match the group permissions, which means that the use of umask and similar should be disabled and an exception added to catch explicit attempts.

[jmoore]

Related to #1774

[jmoore]

Semi-related to #1779 (see Carlos' comment).

[jmoore]

From Jean-Marie:

I checked out the latest server code (r6126) and re-installed everything, my db was corrupted b/c of permissions test I was doing. I went through a fresh install twice just in case, and I still have the same error. Note that nothing during the process tells me that the install did not work.

Caused by: ome.conditions.PermissionMismatchGroupSecurityViolation: Manually setting permissions currently disallowed
	at ome.security.basic.OmeroInterceptor.newTransientDetails(OmeroInterceptor.java:477)
	at ome.security.basic.OmeroInterceptor.onSave(OmeroInterceptor.java:160)
	at org.hibernate.event.def.AbstractSaveEventListener.substituteValuesIfNecessary(AbstractSaveEventListener.java:394)
	at org.hibernate.event.def.AbstractSaveEventListener.performSaveOrReplicate(AbstractSaveEventListener.java:270)
	at org.hibernate.event.def.AbstractSaveEventListener.performSave(AbstractSaveEventListener.java:181)
	at org.hibernate.event.def.AbstractSaveEventListener.saveWithGeneratedId(AbstractSaveEventListener.java:121)
	at org.hibernate.event.def.DefaultMergeEventListener.entityIsTransient(DefaultMergeEventListener.java:186)
	at org.springframework.orm.hibernate3.support.IdTransferringMergeEventListener.entityIsTransient(IdTransferringMergeEventListener.java:58)
	at ome.security.basic.MergeEventListener.entityIsTransient(MergeEventListener.java:135)
	at org.hibernate.event.def.DefaultMergeEventListener.onMerge(DefaultMergeEventListener.java:123)
	at ome.security.basic.MergeEventListener.onMerge(MergeEventListener.java:85)
	at org.hibernate.event.def.DefaultMergeEventListener.onMerge(DefaultMergeEventListener.java:53)
n	at ome.security.basic.MergeEventListener.onMerge(MergeEventListener.java:75)
	at org.hibernate.impl.SessionImpl.fireMerge(SessionImpl.java:677)
	at org.hibernate.impl.SessionImpl.merge(SessionImpl.java:661)
	at org.hibernate.impl.SessionImpl.merge(SessionImpl.java:665)
	at ome.logic.UpdateImpl.internalMerge(UpdateImpl.java:266)
	at ome.logic.UpdateImpl$2.run(UpdateImpl.java:120)
	at ome.logic.UpdateImpl$2.run(UpdateImpl.java:119)
	at ome.logic.UpdateImpl.doAction(UpdateImpl.java:304)
	at ome.logic.UpdateImpl.doAction(UpdateImpl.java:295)
	at ome.logic.UpdateImpl.saveAndReturnObject(UpdateImpl.java:117)
	at ome.services.scripts.ScriptUploader.createScript(ScriptUploader.java:182)
	at ome.services.scripts.ScriptUploader$1.doWork(ScriptUploader.java:121)

[jmoore]

r6129 has an attempted fix. The work on #1784 means that it should be unnecessary to set the permissions on these objects.

[jmoore]

The work for this took place under #1704: defaultPermissions was removed, and umasks are no longer stored since group permissions (#1434) take precedence.