[webui] Refactor AttribPolicy#create?, part I

* Move type and namespace permission checks into seperate methods. That
  should make the main policy smaller and more readable
* Added comments to newly created methods
* Uses any? iterator instead of each to reduce complexity