HiI think it would be better (safer, easier to administer, less prone to error, more conventional) if permissions were inherited from the normal role. And then for individuals you could over-ride with access/deny on their page. Very much like how ...