celaned up the files a little bit and added roles hierarchy and access rules to the config.