When every exception becomes a new role, you need attributes

If your permission matrix keeps growing a new role for every customer exception, that is usually a...