added user role limits (hard coded for now)