added user roles and authorizations for actions