Group permissions overhaul

[allejo]

Handling of group permissions needs to be revisited for 2.6.x and here are things that are to be done. Feel free to add more requirements/tasks.

• Handle custom permissions better than with just a vector
• Properly support +ALL for custom permissions
• Support negating (-) and denying (!) custom permissions
• Rewrite group permission parsing entirely