Locality permissions

Locality scoped permissions granted to roles (and indirectly to their member users). These permissions are granted in addition to those granted at the global level.