using role mask on users for roles