extends CActiveRecord model to include RBAC (Role Based Access Control) in find functions