Establish permissions

[jimsafley]

The current permissions are rudimentary and likely don't reflect a typical workflow. Come up with baseline permission rules for global roles (author, reviewer, editor, etc.) and fine-tune them using site permissions (viewer, editor, admin).