Roles management work

Includes access to everything except purge and merge for committee members, plus role protection for committee/characterref/admin roles from committee members.