Get role or set the public role

Fixes #26 

 [ ] Set the public role
 [ ] Allow public role

`ObjectId("000000000000000000000001")` is the ghost CRUD role that will have the access configured in templates.