Implement a very basic interface for determining roles of users.
Add a authorize() method for checking whether an action may be executed by a given user.