Oh hmm, that's not a bad idea, but then we'd have to remove edit permission from each role individually, right?