adding roles to check access to stores actions