Group user accounts by role

Replaces the two-way admin/user split with four groups ordered by
capability: administration, Redaktion, editors, alumni. alumni takes
precedence over capability in role_group, so a retired admin appears at the
bottom rather than the top.

Forms now offer the three roles as checkboxes rather than a single admin
checkbox, with a trailing hidden blank so an empty set can be posted, and
user_params permits roles only for admins. Three create buttons prefill the
common combinations.

1 files changed, 19 insertions, 0 deletions

diff --git a/public/stylesheets/admin.css b/public/stylesheets/admin.css
index c0496c6e..9991fad0 100644
--- a/public/stylesheets/admin.css
+++ b/public/stylesheets/admin.css
@@ -796,6 +796,25 @@ table.revisions_table tr:hover {
   margin: 0;
 }
 
+.user_group_heading {
+  margin-top: 1.5rem;
+}
+
+/* Retired accounts: present for attribution, not for action. */
+.user_group_alumni,
+.user_table_alumni {
+  color: var(--text-muted);
+}
+
+.role_choice {
+  display: block;
+  margin-bottom: 0.35rem;
+}
+
+.role_choice .field_hint {
+  margin-left: 0.5rem;
+}
+
 /* ============================================================
    Translation compare view (page_translations#show)
    ============================================================ */