fixes #1324 - Separate permssions on hosts from permissions for objects within hosts.

This allows a user to be granted permission to edit the host (and so change the group or proxy) but not, for example, edit the parameters
This could probably be extended further if necessary.