limit access to menu options

[phil]

Well we are a bit more sophisticated that this - as we are actually defining role with authority levels and any number of users can be given that role - so we don't need to reinvent the permissions for each user at all.

There are many ways to skin a cat though and what we has works well - just need to get one's head around it.