Roles correctly visible to users

- users can now check what each role group grants in terms of permissions
- users cannot see a non-working add user / list users button