OO-990: only retrieve the roles once, use them for all access security...

OO-990: only retrieve the roles once, use them for all access security control, retrieve the groups only if the roles coach, participant or waiting are there... to minimize the number of queries