Permission sets for sensible defaults in module-provided permissions to roles

Created a feature that would be easily shareable among Drupal sites except for a big failing of Drupal to allow for module-provided sensible default permissions.

<?php
  // 4 is the 'content manager' role created in our installation profile.
  // Using 4 seems more stable than looking it up with user_role_load_by_name.
  // Please note that i lobbied really hard for a content admin sort of role
  // to apply sensible defaults to: http://drupal.org/node/182023
?>

@TODO: Bring this issue back for Drupal 8 as permission groupings or permission sets; the same way Drupal can assign all new permissions to whichever role has the special 'administrator' designation, so should several role sets be available for similar use.

'administrator' => the role (or roles) given this designation get all permissions provided explicitly (rather than dynamically) by modules- this is pretty much the current behavior.

'content manager' => the role or roles given this designation can be given sensible default permissions by modules.

'content editor' =>

'content administrator' =>

user admin? Actually i don't even know what these should be, but they should be.

Drupal core doesn't have to ship with any of these used, though the default profile starting with at least a couple would certainly help. The idea

Having a special hook for assigning default permissions would be cool so that there could be a 'reset to defaults' option, but that is problematic enough in itself (regardless of functionality) that the ability to assign permissions to roles in different permission sets during install and update hooks is a start.

Like this:

<?php
  $roles = user_role_load_by_permission_set(CONTENT_MANAGER);
  foreach ($roles as $role) {
    user_role_grant_permissions($role->rid, array('manage example content', 'munge example content'));
  }
?>

Note how this is only used in the assignment process; it doesn't affect the way the permissions system works at all.