The old form of addUser didn't take any role names as input, it just took a read-only boolean. There were basically 4 kinds of users it could make, based on the value of readOnly and whether or not the command was run on the admin DB. We need to figure out what the right roles to grant users are in each of those 4 cases.

Proposed plan:

• DB-level read-only gets the "read" role.
• DB-level read-write gets the new "dbOwner" role, which is the equivalent of readWrite + dbAdmin + userAdmin on that database.
• admin read-only gets the "readAnyDatabase" role
• admin read-write gets a still-to-be-named "superuser" role.