fixed roles through join-table