Multiple roles permission enforcement