Implement a simple who can edit permission based on roles