user roles to model
people for editors only
people for referees, not editors only
forgot access rights in controller
no rights -> redirect to login
after login -> redirect to assignments