database: Added finer-grained enrol permissions on offerings. (Separate permissions for students, tutors and lecturers.) Enrolment page: Added a drop-down box for selecting which role to enrol as. The role is checked against the user's permissions, to make sure they have the authority to assign such a role.