Feature Request: Permissions system overhaul / Enhance role enforcement for all pages

[wrongecho]

All pages (including reports) should have good role enforcement. If a page is hidden from the menu, it shouldn't be accessible just because you know a valid URL.

--

Getting lots of interest in this on the forum: https://forum.itflow.org/d/50-user-permissions & https://forum.itflow.org/d/243-feature-request-limit-technician-access-to-clients/6

My thoughts are here

[wrongecho]

Removing from 1.0

[wrongecho]

On the back of this forum post, we probably need to consider having 2 or more "modules" for permissions to reports, too (tech and financial maybe?).

[wrongecho]

We need a way to enforce access to client for edits and deletes too since we added back the ability to hide clients from users.
Simple way is probably to ensure client_id is aways the get/post variable name (sometimes we use other things) and do the check off that at the start of POST.