Implements support for roles (per route and per user)