added structure for roles based security