I've added the roles as APP_CONFIG[:roles_with_access_to_art_files] to application.yml.  this file is not committed to git, but application.yml.example is.

keep in mind that this is for people allowed to access the art_files uploader, not the whole app.  The file uploader will contain models/controllers for different types of files in the near future.