Notes:

• Note that only the administrator and user should be able to access this page
• Only the administrator should be able to edit the permissions
• Should permissions relate to POM roles? How can we really do that securely?
• Under roles, if user has rights to edit the role, then the edit list renders