Added location authorization by roles