fixed role permissions in fetch_data