Added new private ACL::get_user_roles() that used below

**@todo** Its may be public?