Enforce user roles.