Application roles specify the right (privilege) to execute one or more tasks in the application.
LedgerSMB enforces these roles by allowing a user to select (list, read) data from or to
insert (create), update (edit) or delete (delete) data in the tables holding the data
related to the execution of these tasks.