Add ACL Manager to new UI

For 11.3 we have a new call filesystem.setacl that gives us more control over acls for Windows/SMB permissions, the following should be considered for implementing this:

Will need 2 different permission managers in new UI, one for UNIX permissions and one for extended ACLs
middleware supports a simplified and an advanced view for extended ACLs (similar to Security tab of Windows system), goal of our UI is to mimic this as users will be familiar with that UI
should we warn if user clicks Advanced?
can we provide validation for invalid combinations for advanced permissions?
Deny is an explicit override
will need good tooltips to assist users not familiar with using the Windows Security tab
will need good URL to point to to help users understand Windows ACLs and inheritance (if a good one exists), Andrew can also assist with ACL info to put in Guide
add button to strip ACL entries (with Confirm) to return to Unix/POSIX perms with warning that they’ll have to recreate ACL to get it back, also add a Create Snapshot option (or do automatically)? snapshot is nice idea but if user starts doing perms before restoring...

Need to be able to set owner@, user@ or others@ or USER or GROUP for tag, if USER or GROUP we provide the uid or gid.
Select full control, modify or read