protect the admin user
change role to enum