[timskii]

Fel’s code works for 0.9.x. My code works for 1.0.

Worth making clear that 0.9 code will stop working once you upgrade to 1.0: Users with bespoke roles loose their capabilities, although those old roles do remain in the database, so can be found by new code.