make sure user defined before checking roles based security

Signed-off-by: Sean Wesenberg <wookets@gmail.com>