Coldbox Security Interceptor

Question

Hi I am new to coldbox and working on a guestbook messaging forum. does anyone know how I can apply some rule in coldbox to show edit and delete for specified users of admin or user in the edit page. I am not sure how to specify this as I already have my rules here as shown in securityRules.xml:

SecurityRules.XML

ehSecurity\.dspLogin,ehSecurity\.doLogin,ehSecurity\.dspLogoff -->

<rules>
    <rule>
        <whitelist>.*</whitelist>
        <securelist></securelist>
        <roles>admin</roles>
        <permissions></permissions>
        <redirect>ehSecurity.dspLogin</redirect>
    </rule>
    <rule>
        <whitelist></whitelist>
        <securelist>^admin/</securelist>
        <roles>author</roles>
        <permissions></permissions>
        <redirect>ehSecurity.dspLogin</redirect>
    </rule>
</rules>