Basic support for job start/cancel via REST API with supporting tests.

lib/main/access.py

@@ -517,6 +517,10 @@ class JobAccess(BaseAccess):
 
     model = Job
 
+    def can_change(self, obj, data):
+        print 'CAN_CHANGE', obj, data
+        return self.user.is_superuser and obj.status == 'new'
+
     def can_start(self, obj):
         return False # FIXME