It would be a benefit having folders for groups and roles for the security section by default.

Folders enable some kind of "multi-tenancy" behavior where sub-admins can manage users contained in a folder (a folder could be a department, site, ...).

Besides ACL settings in Magnolia, the following additional changes are needed for Magnolia 4.5.x to make use of folders in groups and roles:

• Change classes tree configuration in admin interface for users and groups (add context menu to add folders)
• change groups-, roles- and user-managers to be able to handle folders

You can find a working example webapp attached - but before taking this into a production release more tests are needed!