Assert a role has (or does not have) a permission, read from the permissions page: the checkbox of the permission in the column of the role. The permission is named as the page shows it ("Administer content"). Needs an account that may open the permissions page.
Examples
Then the "Editor" role should have the permission "Access the content overview page"
Then the "Editor" role should not have the permission "Administer Layouts"
And the "Anonymous" role should have the permission "View published content"
Then the "Authenticated" role should not have the permission "Administer menus and menu items"
And the "Administrator" role should have the permission "Administer user accounts"
Pattern
Then(/^the "([^"]*)" role should( not)* have the permission "([^"]*)"$/, …)
Part of @webship-js/backdrop-cms-steps (github.com/webship/backdrop-cms-steps), a step pack for Webship-js 2.0.x.