removed mustHaveRole argument