Use top-level user_access.access_as instead of per-group/project
The previous attempt at bringing user access to core was unsound: It is not possible to vary UserName
by group or project without specifying the group or project as part of the proxy request.
See #338 (closed)