fixes for user roles (methods allowed for users with role)