b7c2369988
The previous implementation would delete all accesses if the bucket was not all_access. I think it's simpler to move the bucket workflow into a separate Buckets::WorkflowsController, rather than deal with different sets of params from different forms in the existing BucketsController.