fixed null-pointer for role-less nodes, fixed reverse rule order from
node-accept to role-accept