refactoring: roles of current user