Allow the application of permissions to connections

It is currently not possible to define the read/write permissions of a connection independently from the permissions of the objects. We have many cases where the individuals assigned the task of mapping one type of thing to another only have read permission on the objects on either side of the relationship, but need to be given permission to perform the mappings. This often is done in a matrix model, but can be done elsewhere.