fixed name space prefix role -> roles