added role and permission resource handlers
added TODO