return false if user did not have any roles