ACL for halls

[nsychev]

We may need to separate volunteers by the halls.

• Hall list for each volunteer with access privilege
• Multi filter in hall list
• Hall list modification in web interface
• Hall list modification in CLI
• Hide restricted halls at frontend
• Disallow taking balloons from restricted halls