Added role-based permissions