user role management and user restrictions added