feat: security role inheritance

[notanatol]

Checklist

• I have read the coding guide
• Code the inheritance tree
• My change requires a documentation update and I have done it

Description

Hard coded list of roles with the inheritance relationship between them

Motivation and context (Optional)

We need an expressive way of defining permission inheritance.

---

This change is 

[notanatol]

@AuHau @nugaon @agazso Feel free to drop the desired mapping of roles here in the comments and I'll code it.

[AuHau]

Sorry for not getting back earlier to you about this!

I envision it in this order:
consumer > creator > accountant > maintainer

Where the "right-sided" role has all the "left-sided" role's permissions, if you know what I mean.

[notanatol]

Sorry for not getting back earlier to you about this!

I envision it in this order: consumer > creator > accountant > maintainer

Where the "right-sided" role has all the "left-sided" role's permissions, if you know what I mean.

no worries, it's not blocking nor urgent.

I will code this hierarchy but I just want to mention that we have the freedom to also add new roles, we are not limited to this four.