Update permissions docs and port sections from EE.
Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/45222