Extends the role-based control of acl9 to include one more layer: permissions can be defined to have roles
>= 0
James Stuart