fix for permissions issue when using role separation