Only admins are able to see or do anything per default

After logging in using an OpenID, a regular user, not assigned to any group, only sees a fatal error message. there's no way to see or do anything. Assining the user to the Administrator group resolves the issue.

There should be an implicit default group for all authenticated users, that allow at least a minimum of activity. If no such group is provided, creating a user record without assigning a group eplicitly should generate a warning. In this case, there should be a "normal user" group defined per default. The only group available per default appears to be "Administrators".

Basically, what is missing are groups corresponding to the "Authenticated" and "Any Role" ACL Roles. The latter should apply to all users, even if assigned to no group (or there should be an implicit "all" group).