fix: user roles
add: sql scripts