v1.2.5 - add setUserRoles; support both user objs and user ids for all functions