dynamic role hierarchy + ehcache configuration