optimized role permission handling