LPS-38702

Hi Ray,

this one is related to permissions, it should limit roles assignment only to proper groups:
- organization roles to organization
- site roles to sites
- disable regular roles to be assigned on group level

I'm not sure with this block: https://github.com/topolik/liferay-portal/blob/d1422b5ca81c8152b2ca523abd58dd37524f4667/portal-impl/src/com/liferay/portal/service/permission/UserGroupRolePermissionImpl.java#L61,L65

I'd rather specify all allowed site types than the disallowed but I'm not sure about all the allowed types.

Thanks.