Customer manager portal permissions

Customer Manager invitees get both the HD Customer and HD Customer Manager roles, and doctype permissions are added so they can open tickets instead of seeing "Ticket not found".