problem

Currently a user can have only the "admin" role. But then this admin is not able even to log in, since in addition the PM and Editor role is needed.

This is not very nice and intuitive.

Therefore we should clean up the role / right mapping, so that admin and pm roles are not additive any more.

Meaning:

• admin should automatically have the rights of all other roles
• pm should automatically have the rights of all other roles except API and admin

Trying to login without Editor role is causing the following error:
ERROR in core: E9999 - No initial_page resource is found.

Previous intended solution

The previous intended solution of this issue was to clean up ACL roles and rights, so duplicate the needed rights from editor, to pm and admin and so on.

Implemented solution

Much faster was the creation of auto_set_role resource, defining for each role which other role should be set automatically on choosing the affected role.