added user roles, administrative actions only available for Admin role now