Modification of user profile data by AlirPunkto administrators

AlirPunkto Administrators should be allowed to view, but not to modify, the following user profile fields of all users:

Pseudonym (= display name);
user number;
role in the Cooperative (= none / Ordinary member of the Community / Cooperator / Member of the Board / Member of the Mediation and Arbitration Council);
date - time of last update of their Cooperative Behaviour Mark;
the boolean variables associated with their role in the Cooperative;
their date of resignation or exclusion from the Cooperative.

AlirPunkto Administrators should be allowed to modify the following elements of the profile data of any user:

remove any "Ordinary Member of the Community" from the LDAP directory;
promote any "Cooperator" to the role of "Member of the Board" or of "Member of the Mediation and Arbitration Council" (provisional, see Issue #57 );
demote any "Member of the Board" or "Member of the Mediation and Arbitration Council" to the role of Cooperator (provisional, see Issue #57 );
demote any "Cooperator" to the role of "Ordinary Member of the Community" (provisional, see Issue #56 );
promote any "Ordinary Member of the Community" whose identity data and nationality have been validated to the role of "Cooperator" (provisional, see Issue #56 ) = restore a former "Cooperator" to its full voting rights at the end of the sanction period;
demote any "Cooperator" to the role of "none" (provisional, see Issue #56 ).

michaellaunay / alirpunkto