auth roles are in db now, admin and superadmin can add more

common/proto/auth.proto

@@ -9,6 +9,9 @@ service AuthService {
   rpc Login(LoginRequest) returns (LoginResponse);
   rpc GetAuthorization(GetAuthorizationRequest) returns (AuthorizationSnapshot);
   rpc SetTimezone(SetTimezoneRequest) returns (UserPreferences);
+  rpc ListRoles(ListRolesRequest) returns (ListRolesResponse);
+  rpc AddRole(AddRoleRequest) returns (Role);
+  rpc RemoveRole(RemoveRoleRequest) returns (Role);
 }
 
 message RegisterRequest {
@@ -64,3 +67,22 @@ message AuthorizationSnapshot {
   string role = 1;
   repeated Permission permissions = 2;
 }
+
+message Role {
+  string name = 1;
+  bool built_in = 2;
+}
+
+message ListRolesRequest {}
+
+message ListRolesResponse {
+  repeated Role roles = 1;
+}
+
+message AddRoleRequest {
+  string name = 1;
+}
+
+message RemoveRoleRequest {
+  string name = 1;
+}