Added simple RBAC-like system. This closely resembles a Flat RBAC where a user can belong to multiple roles (groups in this implementation).