Added restrictions for user_role on user model