nuxeo-document-permissions references "Everything" permission group instead of "WriteSecurity" atomic permission

The <nuxeo-document-permissions> element checks if the user has "Everything" permission in a number of different places. (The _hasPermission function then ignores the permission passed in as an argument, and explicitly checks for the "Everything" permission group.)

Expected Behaviour: If a user is assigned the "WriteSecurity" permission, they should be able to modify permissions on a document.

Actual Behaviour: A user with "WriteSecurity" permission cannot modify permissions on a document (unless they also have the "Everything" permission).

Use Case: In certain scenarios, there could be a group of delegated administrators that can perform limited operations e.g. to modify the permissions of other users, but without direct permissions themselves to write/delete the document itself. Of course, a user could assign themselves the "Everything" permission, and then do everything, but it would be a deliberate two-step process, logged in the audit history, etc.)