prep for user permissions/roles