Simplify of the security model

D207: Right now it is not possible, to give users with multiple roles assigned, different functions, without using departments. It would be nice to have the possibility to grand view privileges to a group of schedules and grand update privileges to another group of schedules without having the departmental function privileges overriding the view only role. It can become very difficult and unclear troubleshooting problems related to the authorization. We also miss the possibility to limit the rights in te Notification Manager (you are able to modify notifications or you are not allowed).