fix rbac select statement