Write docu about new rights system

Either in a HowTo or in the wiki

Idea was:
- every Group entry in the Group-attribute has rights to the folder
- empty children Group-attribute gets rights from parents
- filled children Group-attribute have rights just on this entries (parents must have this entries too or you wont see it)
