This moves some workspace and workflow specific code from SolrServiceImpl to the new SolrServiceWorkspaceWorkflowRestrictionPlugin. This also updates the SolrServiceResourceRestrictionPlugin to restrict those records based on read rights as well.