(wip) dropping roles table and refactoring access_rights (still missing: drop access_levels for fields and javascript)