ROLE_ADMIN now inherits from ROLE_EDITOR