First steps for bug 14801: add backend support for per-namespace permissions to core...