[cubification] moved CWPermission handling into a localperms cube. closes #1914011 keeping bw compat provided the cube is available (else user should be warned he has to install it).

# sync and restart to make sure cwuri does not appear in forms
sync_schema_props_perms()