* No detailed permissions due to django constraints on model-based permissions * instead: logic controlled permission by group membership * adds translations
* adds raw permission values for all groups