By default on an ERP5Site, only Manager can change local roles.

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@9337 20353a03-c40f-0410-a6d1-a30d3c3de9de

product/ERP5/ERP5Site.py

@@ -1222,6 +1222,7 @@ class ERP5Generator(PortalGenerator):
       'Access future portal content' : ('Manager', 'Reviewer'),
       'Access session data'          : ('Manager', 'Anonymous'),
       'AccessContentsInformation'    : ('Manager', 'Member'),
+      'Change local roles'           : ('Manager', ),
       'Add portal content'           : ('Manager', 'Owner'),
       'Add portal folders'           : ('Manager', 'Owner'),
       'Delete objects'               : ('Manager', 'Owner'),
@@ -1234,7 +1235,7 @@ class ERP5Generator(PortalGenerator):
       'Reply to item'                : ('Manager', 'Member'),
       'Review portal content'        : ('Manager', 'Reviewer'),
       'Search ZCatalog'              : ('Manager', 'Member'),
-      'Set own password'             : ('Manager',),
+      'Set own password'             : ('Manager', ),
       'Set own properties'           : ('Manager', 'Member'),
       'Undo changes'                 : ('Manager', 'Owner'),
       'View'                         : ('Manager', 'Member',