There is a request to be able to configure "Security Roles" through the WebUI.
Currently, the role assignment is done through a file called magic-users.properties.
This file is processed in conjunction with users.xml to provide access to the WebUI.
There is a hard coded list of roles, and each of them has its own hard coded features.
The idea is be able to obtain this list of roles, as well as configure them through either ReST or the WebUI.