use a new field as the role id to avoid security issue