Make rights management finer

[combefis]

For example, an exam can be updated by admin only,
BUT teacher must be able to update the copies field.
(maybe the solution is to modify the model and not to store references to copies in exam)