roles and rights management

the new role based rights management is now working and will replace the old user/group based rights management. i added a new dialog to the admin application where the administrator can define new roles, add members (users and groups) and define the rights for the roles.

the setup creates two roles: the user role (which has only the right to run all applications except the Admin application) and the admin role (has all rights).

more rights will be added to the applications soon.