user model: role, not repaired