Add role checks to ins/find/del (not to upd), refactor operation ctx
test fixes