hasRole controller plugin