isolate server-side role code
change function name to userIsInRole
let userIsInRole check objects and arrays