Guest account can log efforts / #2312

Guest account with "Person can login" and "View anything" rights have superfluous rights in some places and functions.

In particularly such user can:
- upload files to any projects (they are not visible later, but in fact they are uploaded to web-server)
- create new Efforts

from Acid_Jack