Ldap groups mapping

Add mapping from ldap groups to django groups.
Defines roles:
* assets-buyer,
* assets-helper,
* assets-staff.

Requirements:
* sync fixture,
* change configs.