Current situation:
Integrated has one user list, but multiple channels
Login to Integrated (backend) is possible for front-end users, a role and firewall configuration is required to protect this
Required situation:
Split backend and frontend users
Allow multiple, seperated, frontend user "bags", which can be used on multiple channels
This will be done with "User scopes"
A scope can be used on one or more channels for frontend login
The "Integrated" scope is a special scope: always available (not stored in database) and the scope for log in to Integrated
Add "user scopes" to the database
Fields: ID and name
Add a CRUD to edit, like the group edit at: /admin/group/ (only difference is that it is called User scopes instead of Groups and the Roles field is not available
Add "User scopes" to the Manage menu
Add a scope "Public" to the datafixtures
Add Behat tests for CRUD operations. Example: https://github.com/integratedfordevelopers/integrated/blob/0.7/features/group.feature