add roles granting
fix