rbac for trackstar, implemented but not tested