Use array for permitted roles instead of string variable. #issue 30.