fix role permission assignment bug