My idea is to make role settings visible at various places in the Software Factory. This will make it easier to set authoristations while implementing new functionality.
Like below in the colums settings.

Same idea, for all contexts like it is done for 'Translations’