fixes roles permissions