restrict access to domains using user roles retreived from data-web