Touching on #12 this add role to user

and a decorator to grant/limit access based on role.