No role command: roles cannot be managed from the CLI

[jorisvilardell]

Is your feature request related to a problem?

ferris-ctl --help lists context, realm, client, user, source, login, logout. There is no role command, so creating a role, listing roles, deleting one, or assigning and removing one is impossible except by importing a whole realm file. For an IAM tool, that is the daily operation that is missing.

Desired solution

A role command covering the lifecycle:

ferris-ctl role list   [--realm <realm>] [--client <client_id>]
ferris-ctl role get    <name> [--client <client_id>]
ferris-ctl role create <name> [--client <client_id>] [--description <text>] [--permissions <list>]
ferris-ctl role delete <name> [--client <client_id>]

Realm roles and client roles should both be reachable — --client selecting the latter — since the import format already creates client roles that nothing can currently manage.

Assignment to users is covered by the separate user gap.

Environment

ferris-ctl 0.2.3, FerrisKey server 0.7.0