Adds new editor and associate editor roles to the auth system

* define and create the configuration for mapping top level roles to low level roles
* update the Authorise object to check role based on that config where necessary