COMPLETE RBAC PATCH

Extract into the directory containing cms.

Workflow:
1. Roles & Permissions > select school > Add Role.
2. Use Permissions to grant module permissions.
3. Use Branches to grant multi-branch access.
4. Use Assign User Roles to select a staff user and save roles.
5. Approval Rights are optional.

Owner can manage every school. School admins are restricted to their own school.
No SQL import is required if the RBAC tables already exist.
