Roles & permissions

Shopify-style staff access: create a role, then tick what it can do.