patch: Add a separate TRUNCATE permission

Here's a patch implementing the TODO item "Add a separate TRUNCATE
permission".  Hopefully I found all the bits that needed to be
modified to make this work.

Any feedback appreciated.

Thanks,

...Robert