query to find codelists for which users have a role