pub fn system_roles(contributed: &[Permission]) -> Vec<SystemRole<'static>>Expand description
The framework’s roles, with the permissions the registry says they hold.
A permission that names no role belongs to ROLE_ADMIN alone: an
undeclared permission reaching only the administrator is the safe reading,
and the role editor shows the author it is not reaching editors.