added logic to validate each devis only for ROLE_ADMIN