Only allowing additive custom roles
Based on the discussion in #352891 (comment 1059561579), allow only additive permissions for customizable roles. This will make the implementation / debugging / usage simpler and easier to understand.
Based on the discussion in #352891 (comment 1059561579), allow only additive permissions for customizable roles. This will make the implementation / debugging / usage simpler and easier to understand.