get_policy_admin_links template tag; playing with UI to grant/revoke user roles