Convert Vmdb::PermissionsStore to a blacklist

[Fryguy]

It's uncommon to prevent features, so the permissions store works better as a blacklist. Otherwise, we are forced to add new items to the whitelist everytime we add things, even when most of the time we actually want them.

Other repos should not need to change except that I will need to change our production whitelist to a blacklist after this is merged.

@gtanzillo Please review.
cc @h-kataria @martinpovolny @agrare

[Fryguy]

Hard to tell, but the big change is the ! here.

[miq-bot]

Checked commit Fryguy@de224fd with ruby 2.4.6, rubocop 0.69.0, haml-lint 0.20.0, and yamllint 1.10.0
3 files checked, 0 offenses detected
Everything looks fine. ⭐

[agrare]

Looks like a sporadic failure https://travis-ci.org/ManageIQ/manageiq/jobs/563230333#L694-L703

[martinpovolny]

Looks good to me.

[mzazrivec]

This causes CI failure in ui-classic:

ApplicationHelper#role_allows? permission store consults the permission store
     Failure/Error: expect(Menu::DefaultMenu.services_menu_section.visible?).to be_truthy
     
       expected: truthy value
            got: false
     # ./spec/helpers/application_helper_spec.rb:62:in `block (5 levels) in <top (required)>'
     # ./spec/helpers/application_helper_spec.rb:50:in `block (4 levels) in <top (required)>'

[Fryguy]

@martinpovolny @himdel Gah! I said to myself "you know, I should run the UI tests before this gets merged". If I had my bot-driven test system in place, it wouldn't have been a thought...I would have just done it. 😠

[martinpovolny]

Even better, if one the Ruby travis tasks from UI ran on each core PR ;-) (just 15 minutes of execution)

[simaishi]

Ivanchuk backport details:

$ git log -1
commit 35c69a6a65529345191349f64662d0482de29e08
Author: Harpreet Kataria <hkataria@redhat.com>
Date:   Wed Jul 24 19:49:47 2019 -0400

    Merge pull request #19053 from Fryguy/blacklist_permissions_store
    
    Convert Vmdb::PermissionsStore to a blacklist
    
    (cherry picked from commit 7146738a0ae43b586b883480d42d5ff2c39dd96c)