Implement a simple can publish permission based on roles