Roles and permissions

Allow configuring roles and permissions with a good default set for the average school.