OO-981: if the catalog is disabled, remove the tool "add to catalog" in course toolbar and remove the little message in publish workflow

OO-990: only retrieve the roles once, use them for all access security control, retrieve the groups only if the roles coach, participant or waiting are there... to minimize the number of queries