ANTARCTICLE-277 strict validation for incoming json with user roles