Roles and Authorization

https://github.com/openSUSE/osem/issues/23

Opening a PR for easier commenting on code, even though feature is not complete yet.
should not we put admin to the very bottom, so his role will overwrite everything declared before?