Add several administration levels

[pferreir]

Admins can currently do everything - we don't want that, since accidents happen occasionally.
The idea would be to have at least two "privileged" levels:

• "Manager" (?) - All privileges, except access to the admin area;
• "Administrator" - All privileges;