Description of problem: Currently, there is no way a user can display just what roles are available to that user (the newrole command must have the role specified). Add the command "show_roles" to display the roles available to a user.
The problem is that roles are specific to the command you are executing. IE you might have different roles available for newrole then you do for su, sudo, login, xdm... Roles are governed by the attainable roles and the contents of /etc/security/default_contexts.
I am changing this to notabug, but we can bring it up for discussion on the list. Stephen would probably comment there. Dan