roles_n_privileges.yml

---
:role_root:
  :can_do:
    :User:
    - :update
    - :save
  :cant_do:
    :User:
    - :destroy
:role_prospect_designer:
  :can_do:
    :BuildingBlock:
    - :create
    - :save
    - :update
    - :destroy
    - :finalize!
    :ParameterGroup:
    - :create
    - :save
    - :update
    - :destroy
    :BlockParameter:
    - :create
    - :save
    - :update
    - :destroy
:role_plant_engineer:
  :can_do:
    :Recipe:
    - :create
    - :save
    - :update
    - :destroy
:role_super_user:
  :can_do:
    :Plant:
    - :create
    - :save
    - :update
    - :destroy
  :cant_do: :anything