Set policies according to current reqs

so applicants cannot do anything, apprentices can view, create and edit everything but not delete most objects, while editors can do everything and admins also manage users