update

modules/ROOT/pages/deployment/general/roles-permissions.adoc

@@ -9,11 +9,13 @@
 
 == General Info
 
+=== Front-end and Back-end View
+
 When it comes to roles and permissions, there is a big difference between the back-end (Infinite Scale) and the front-end (ownCloud Web). This is because Infinite Scale provides capabilities with the back-end that can be used by APIs and a front-end that has best practices for users implemented via these APIs.
 
 This means that the back-end currently provides much more capabilities than the front-end offers to users. 
 
-For the moment, it would be counterproductive to provide methods to users or admins via the web interface which are not fully developed and therefore could potentially harm the system. For these reasons, restrictions have been implemented in the front-end to protect the Infinite Scale back-end.
+For the moment, it would be counterproductive to provide methods to users or admins via the web interface which are not fully developed and therefore could potentially harm the system or confuse users. For these reasons, restrictions have been implemented in the front-end to protect the Infinite Scale back-end and guarantee user satisfaction.
 
 Examples where the front-end currently provides limited capabilities to users though the back-end has more capabilities:
 
@@ -23,6 +25,10 @@ Examples where the front-end currently provides limited capabilities to users th
 
 Over time, methods will be implemented in the front-end to provide capabilities the back-end provides, in the best and most user friendly way.
 
+=== Permission Granularity
+
+Compared to ownCloud Server where the administrator has more or less full access to everything, Infinite Scale refines roles with assigned permissions types including particular permissions for that type in a much more detailed level. This enhances not only security but also enables company policies.  
+
 == Back-end Roles and Permissions
 
 Currently there are four predefined back-end roles with fixed permissions assigned to specific roles. Note that some permissions are only granted for the account itself and not in general.
@@ -38,6 +44,8 @@ Read the image below the following way::
 
 {empty} +
 
+// the table references following code: https://github.com/owncloud/ocis/blob/master/services/settings/pkg/store/defaults/defaults.go
+
 image::deployment/general/roles-and-permissions-matrix.svg[width=550]
 
 === Back-end Role Details