Access control and domain model management

Each end-user dataspace is paired with a separate administration dataspace.

The administration dataspace manages the assets that govern its end-user dataspace: ontologies, access control, and packages. Only dataspace owners have access to it.