Martijn,

> Exactly. Given that "role" is implemented according to the standard,
> leave it be. A user could always be part of a "group" and inherited

all

> privileges for that "group". It could be assigned to multiple groups

and

> get all privileges after login, without the need to specify the

groupname

> on login or switch groups.

This is exactly what I have been trying to say -- although probably
poorly.


Sean