use custom capability
first implementation of roles/capabilites, clone WP