idea for route based role control