CARE #92: Correct permissions for roles