• Support the new ABAC model, r.obj.Owner syntax is supported in matcher to get the owner attribute for a resource.
• Add SetModel() to management API.
• The model can be constructed in code manually now, see example: TestCreateModelManually.
• Add GetUsersForRole() to RBAC API.