Distinguish custom field VIEW from EDIT permissions

Before: CustomGroup ACLs made no distinction between VIEW and EDIT

After: User with VIEW can see a custom group but not edit it, both in the UI and the API.