permit role definitions for cursors