Add support for role-based permissions

At the moment there's support for roles but they're not used. There should be a way to define what roles can perform what functions, will involve first defining what functions are available in the UI (create/update/delete, etc) then maybe come up with a default set of roles. Be nice to have a UI for associating functions to roles for example.