Group user accounts by role

Replaces the two-way admin/user split with four groups ordered by
capability: administration, Redaktion, editors, alumni. alumni takes
precedence over capability in role_group, so a retired admin appears at the
bottom rather than the top.

Forms now offer the three roles as checkboxes rather than a single admin
checkbox, with a trailing hidden blank so an empty set can be posted, and
user_params permits roles only for admins. Three create buttons prefill the
common combinations.

1 files changed, 25 insertions, 4 deletions

diff --git a/config/locales/en.yml b/config/locales/en.yml
index c3f515b5..f8b94a00 100644
--- a/config/locales/en.yml
+++ b/config/locales/en.yml
@@ -92,6 +92,10 @@ en:
               restore_target_invalid: "Restore target must be a living node"
               destroy_outside_trash: "Nodes are only destroyed from the Trash"
               attach_in_trash: "Cannot attach assets to a node in the Trash"
+        user:
+          attributes:
+            roles:
+              unknown: "contains unknown roles: %{list}"
         related_asset:
           attributes:
             headline:
@@ -224,11 +228,28 @@ en:
       admin: "admin?"
     user:
       confirm_destroy: "Do you really want to destroy user %{login}?"
+      no_roles: "—"
     index:
-      admins: "Admins"
-      create_admin: "Create admin user"
-      users: "Users"
-      create_user: "Create user"
+      title: "User accounts"
+      create_editor: "Create editor account"
+      create_redaktion: "Create Redaktion account"
+      create_admin: "Create admin account"
+      group_admin: "Administration"
+      group_redaktion: "Redaktion"
+      group_editor: "Editors"
+      group_alumni: "Alumni"
+      group_empty: "— none —"
+    labels:
+      roles: "Roles"
+    roles:
+      admin: "Administration"
+      redaktion: "Redaktion"
+      alumni: "Alumnus"
+    role_hints:
+      admin: "User management and navigation, each behind a fresh confirmation."
+      redaktion: "May publish in the protected sections."
+      alumni: "Can no longer log in; attributions are preserved."
+    no_roles: "no special roles"
     new:
       title: "Create new user"