OO-3297: refactor the user management to use organization for managing the roles instead of named security groups

CL-232: in RESTAPI updated node are not set as dirty, course without changes are published and are in a rare status, access are resetted by publish

--HG--
branch : bps