Bulk Action restriction

Bulk service enables to run an action on a large set of documents.
Since NXP-25940 it can be run as non-admin.
Actions are exposed by default as REST, it can be dangerous to expose all actions to everyone.

We may want to add properties to the action that limits:

• who can use the action based on a role
• who can use the action in REST based on a role
• the size of the document set, for instance if more than 10k docs return in error