fixed - added access rights for role reader like was in old portal.