fixes #812 - new permissions model, user group role and nest support, role filters for better granularity
