Override core permissions

Don’t.

Custom permissions and roles

Don’t

Extend core permissions

  • Capture the additional set of needed permissions in a complementary user role name after the core user role (If you intend to extend editor, then name it after editor)
  • Tie them up as DKAN WORKFLOW does it, using a hook_form_alter implementation. See this link.