In addition to creating a rel_segment for each new role and subsite, a new group_rels needs to be inserted. Otherwise the role will not show up in the role options setup by /packages/acs-subsite/www/members/member-invite.tcl. Interestingly, there isn't a tcl api for creating group_rels; is this an oversight?
More generally, I'm unclear at this point what the distinction is between rel_segments and group_rels. They both map groups to acs_rel_types, but they get used in different spots in the admin UI. Is it possible that they represent "convergent evolution" and were developed at two different points in time by two different people to accomplish the same thing? Are there important distinctions that I'm missing? Should maybe group_rels go away in favor of using exclusively rel_segments?
