segmented role privileges
Merge pull request #496 from shackbarth/priv

issue #20540: segmented role privileges