Document permissions and roles

[teneightfive]

Problem

Permissions are currently maintained within a module in the application. This current method makes it hard to anyone to see what permissions exist within the app at any given time and what those permissions allow users to do.

Possible solution

• Document all current permissions used
• Document what permissions current Auth and NOMIS roles receive
• Add a prompt to the Pull Request template to ensure future permissions are documented