Refactor security in order to use Role instead of Permission