Proper access capabilities for seperate user roles