updated: cleaned up access control and added role base accessor methods.
tweaked: default access to 0 which implies no special abilities by default.