Users, roles, and access checking for the Lanes framework