fix role security