[SECURITY] Check role for each property