Permissions: create separate Archiver read all, notification roles

[liptakpanna]

The goal is that the Preserve Platform dev and QA instance can use the Notification role and only for production it will obtain an API key with read all permission.

[zzacharo]

Suggested change

	class ArchiverReader(Generator):
	class ArchiverRole(Generator):
	@property
	def archiver_role():
	raise NotImplementedError()
	def needs(self, **kwargs):
	"""Enabling Needs."""
	return [self.archive_role]
	def query_filter(self, identity=None, **kwargs):
	"""Filters for current identity as system process."""
	for need in identity.provides:
	if need == self.archiver_role:
	return dsl.Q("match_all")
	else:
	return []
	...

[zzacharo]

Suggested change

	class ArchiverNotification(Generator):
	class ArchiverNotification(ArchiverRole):
	@property
	def archiver_role():
	return archiver_notification_role