implemented roleFunction rights