* fix: listing problems respect grant

refactor of grants
-can_clone_all shows all domains but has only acces to clones
-can_clones shows only clones from owned base
-the can_list_xxxx functions works as grups of the can_grants functions
-added is_user_manager for managing users
-is_operato is and conjuntive operation of can_list and is_user_manager

tests checked and adaptet to new hierarchy
added thest 70_list.t to test the listing operations

fix #1003