Add predicate for role permissions