Fix access rules for RoleController