fix verb check for role accesses