fixed roles and authorizing for resources