fixed the invalid role permissions