Feature/818 user roles and permissions