Permissions and Roles overview

[zohar]

The system should have by default the below roles. Make sure each role has exactly the permissions it requires:

• Anonymous: can see content but not users
• Authenticated: should be able to add ideas, comments, and vote on them.
• Site-manager: should be able to manage all content, manage all users (except for the admin), and have access to all non-structural configurations. I.E. site manager shouldn't be able to turn on/off modules and features, use PHP or have any permission that can allow it to gain admin control

Consider to add the following roles:

• Guest: can add ideas that will not be published
• Community manager: only manage content and users (except for user 1), and no configuration

[zohar]

Install and configure paranoia #67

[zohar]

Site manager hasn't permissions to edit "in_action" field. SIte manager should have this permission by default.