debugging CAS role mapping