enhanced permission check

+ added support for multiple roles
+ added support for non existence of roles
+ added support for resolving of properties in role names