The rights of users (different possibilities on the same page). For roles isp. Spring security. How it's done?

There are three users and each has the same rights:

• Vanya: Create posts, Edit posts, Write comments, Like posts
• Seryoga: Create posts, Edit posts, Write comments, Like posts
• Oleg: Create posts, Edit posts, Write comments, Like posts

But suddenly Vanya was guilty and the admin wants to disable the "Write comments" feature.

How is this done? What technologies to use? In the project isp. Spring security, Spring MVC, Hibernate