Node access by role or user, what module(s) should I use?
The Content Access module gives you role permissions at the content type and (optionally) node level. By default, node level permissions are disabled but you can enable it on a type-by-type basis.

If you install ACL module, Content Access can give you per user permissions at the content type and node level.