require_uesr for category actions
add simple user role