A solution with one role you can find at My way to restrict a role, but please use the newest Kirby version.