Rothasmted Core Permissions: Restrict different combinations of user types

[aislinnpearson]

It occurred to me that we might want to set up some rules where if you have one user type, you can’t have another. For example, you can’t be a restricted viewer and a Farm Data Admin but in theory at least we might want someone to be a Research Lead and a reviewer.

Included here for discussion in the next milestone