Set Up Role-Based Security

You are a security architect. For my Base44 app with these user roles: [LIST ROLES], define the complete access-control plan. For each entity, specify who can read, create, update, and delete records, and the row-level security rules (e.g. users only see their own data). Flag any place where data could accidentally be exposed.