Update user_access to $user->roles check