I think you are confusing roles with permissions. Admin is a role, can_delete_everything is a permission. Users are assigned a role. A role can have one or ma

I think you are confusing roles with permissions. Admin is a role, can_delete_everything is a permission. Users are assigned a role. A role can have one or many permissions. Program code checks for specific permissions. Example: username => swalsh, role => hn_subscriptor, permission => can_post, permission => can_upvote.