before authentication and role-based interface implementation