make call handling rights more granular in roles

Please make call handling rights more granular in roles. For instance allow users to set direct forwarding but not change the personal business hour settings.