rbac,
implementing a little logic of check access