major updates to roles and permissions