Yeah I know I can set it up for each role, but that's silly...the whole point is that there are defaults and that you can override them. You should not have to explicitly set permissions on each role.