RBAC

a gentle introduction to roles

A manager (with personnel rights) accessing manage-personnel-home has the personnel role.

A clerk accessing clerk-home has the clerk role.

A clerk accessing client-home produces an error.

We use both page request and user rights for simplicity since some roles (managers, in this case) can map into multiple possible roles per request type. This is an implementation decisions.