user roles/permissions update

simplify user->role reference and permissions