Done authorization check when a user access to GET /api/roles.