init rights and roles management WIP