fixed spec, requireing role in user