finish role authorization