fix permissions control for admin panel
added erd model
* fixed inlining of roles