fixes #812 - new permissions model, user group role and nest support, role filters for better granularity
fixes #3930 - refactoring of edit_self implementation.