rename roles to actions

This gives a more granular permissions model and maps better to what
users are and are not allowed to do.