Tim Hunt
Lead maintainer
Install this plugin into the admin/tool folder, in a subfolder called editrolesbycap.
You will get a new entry under Site administration -> Users -> Permissions that lets you select a capability, and then edit the permission for that capability in all role definition.