get roles and user rights implemented