rewriting roles